Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FB15E/AF1E2EC2B9C911EEB2D5515A775412E6/78656F70B9CA11EEACABC05B775412E6.roa
File: 78656F70B9CA11EEACABC05B775412E6.roa (raw, json)
Hash identifier: emVA2YhztpPXE5YuiwXzfChJgs0DQoXDCoK81NGNBX4=
Subject key identifier: AC:58:3F:C2:9E:13:23:41:D0:62:D5:C1:11:BF:E8:7C:88:F0:9A:8E
Certificate issuer: /CN=F36FB15EAF/serialNumber=C9A59C63B70A8E12BD1C0B1577697171A3FEE0F1
Certificate serial: 02
Authority key identifier: C9:A5:9C:63:B7:0A:8E:12:BD:1C:0B:15:77:69:71:71:A3:FE:E0:F1
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/yaWcY7cKjhK9HAsVd2lxcaP-4PE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FB15E/AF1E2EC2B9C911EEB2D5515A775412E6/78656F70B9CA11EEACABC05B775412E6.roa
Signing time: Tue 23 Jan 2024 08:36:15 +0000
ROA not before: Tue 23 Jan 2024 08:36:11 +0000
ROA not after: Tue 23 Jan 2029 08:36:11 +0000
asID: 329386
IP address blocks: 102.210.53.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Aug 2024 18:09:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FB15EAF/serialNumber=C9A59C63B70A8E12BD1C0B1577697171A3FEE0F1
Validity
Not Before: Jan 23 08:36:11 2024 GMT
Not After : Jan 23 08:36:11 2029 GMT
Subject: CN=65af7a7f-ddc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:31:5e:61:d7:12:1d:b9:64:cd:50:82:77:7a:
da:78:a0:49:03:a6:fc:7a:b8:5c:ed:80:c5:93:59:
23:65:d6:c7:de:98:0f:32:fe:f4:fa:a0:44:c1:f4:
18:47:0c:9f:67:1f:82:a7:fb:6a:b0:bc:6c:09:08:
56:91:8e:a8:a4:52:53:47:e3:61:68:c9:62:7c:77:
96:20:51:f8:21:89:ae:f2:7d:ab:7c:bc:5f:0f:a6:
cc:d0:6e:8c:c4:4a:44:a3:24:5e:0a:a4:36:6c:25:
19:f6:4f:03:1b:ba:bc:9c:6c:f0:cb:b2:da:77:85:
1d:b6:2b:b7:7e:56:a0:60:94:fd:dd:af:7d:46:c7:
6b:1d:7e:3a:96:6b:5f:11:07:14:4f:bf:c1:13:1e:
c8:8f:d3:5b:06:eb:72:4e:5a:e0:ad:f7:0c:5a:5b:
2e:e8:d4:de:6b:7c:3c:3b:a4:fb:94:9b:89:12:e2:
fe:76:50:c6:2b:df:c7:71:cb:3b:6f:f7:bb:98:c1:
ef:1b:13:ce:2b:e6:1c:2d:67:77:cb:b7:35:5b:5c:
ae:94:ef:7f:46:20:34:d0:3c:5d:49:3a:9b:73:f3:
50:70:15:2f:a8:e4:69:d4:cc:16:b2:d0:72:3b:41:
d2:c8:6b:fc:1f:b1:e7:e1:2b:f7:0a:8e:17:5d:7f:
7e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:58:3F:C2:9E:13:23:41:D0:62:D5:C1:11:BF:E8:7C:88:F0:9A:8E
X509v3 Authority Key Identifier:
keyid:C9:A5:9C:63:B7:0A:8E:12:BD:1C:0B:15:77:69:71:71:A3:FE:E0:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB15E/AF1E2EC2B9C911EEB2D5515A775412E6/yaWcY7cKjhK9HAsVd2lxcaP-4PE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yaWcY7cKjhK9HAsVd2lxcaP-4PE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB15E/AF1E2EC2B9C911EEB2D5515A775412E6/78656F70B9CA11EEACABC05B775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.210.53.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:fd:7e:ab:31:45:cd:e9:01:96:3d:30:80:bd:9a:d0:23:c9:
74:58:93:61:68:43:64:49:26:4f:18:68:f8:18:17:37:ce:b8:
56:1d:c5:27:f2:b1:13:bb:2c:55:32:f1:b3:42:03:36:8c:54:
a3:74:a7:1d:97:ec:e5:07:ef:c3:6c:40:aa:2d:12:dd:2e:5f:
cf:08:66:02:ea:a0:e0:de:66:72:62:ec:d3:8e:6d:1a:97:6a:
3b:94:83:36:05:28:ec:30:fb:29:67:e4:03:67:4f:1b:ab:0d:
8b:41:da:c8:4d:77:2a:df:6c:a4:18:a9:f6:8e:fd:f1:48:be:
6f:08:21:31:8a:78:e6:dc:b1:ba:80:4a:66:63:8e:3d:eb:e6:
9c:c6:b8:7e:0d:72:7e:7b:5f:79:5f:6f:b9:2a:1d:ea:76:ec:
b3:22:22:fe:61:9a:b4:e3:e5:45:1d:f0:ee:57:7c:51:60:42:
e2:e3:c8:47:a8:f2:d0:60:dd:7d:52:12:4b:cb:11:18:f2:94:
66:12:cb:4f:53:03:2a:8d:15:08:29:70:f6:f0:30:41:0c:6f:
31:c8:69:b2:51:81:96:14:29:c4:fe:0f:75:41:cb:c2:72:27:
4c:9a:57:b2:0f:50:34:26:4e:4b:b4:64:57:99:9b:31:31:18:
ca:6f:eb:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 12 20:10:48 2024 by rpki-client on console-fra.rpki-client.org